postfix-users May 2014 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: Whitelisting individual addresses with postsc

Re: Whitelisting individual addresses with postscreen

From: Noel Jones <njones_at_nospam>
Date: Wed May 14 2014 - 15:09:19 GMT

On 5/14/2014 9:59 AM, D'Arcy J.M. Cain wrote:
> It looks like hotmail is on two DNSBLs and postscreen is blocking
> them. I would like to offer my users a way to whitelist individual
> addresses but it looks like I can only whitelist CIDR blocks. Is
> that the case or do I have another option?
> Cheers.

The only postscreen whitelisting possible is by IP. Postscreen will
never (and cannot) see a hostname nor an email address.

Your choices are:
- remove the offending DNSBL. Postscreen is not appropriate for a
DNSBL that intentionally lists hosts sending a mixture of good and
bad mail, such as hotmail, AOL, etc.

- move the offending DNSBL to the regular smtpd_*_access checks,
where whitelisting is possible.

- Use a DNSWL and adjust your scores so the offending DNSBL doesn't
reject real servers.

  -- Noel Jones